CVE-2020-9320

Published: Feb 20, 2020Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product

Affected (8)

Products: Avira: Anti Malware Sdk, Antivirus Server, Avira Antivirus For Endpoint, Avira Antivirus For Small Business, Avira Exchange Security, Avira Free Security Suite, Avira Internet Security Suite, Avira Prime

Avira

8 products

Anti Malware Sdk

Antivirus Server

Avira Antivirus For Endpoint

Avira Antivirus For Small Business

Avira Exchange Security

Avira Free Security Suite

Avira Internet Security Suite

Avira Prime

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Avira Anti Malware Sdk	Before 8.3.54.138
Avira Antivirus Server	Before 8.3.54.138
Avira Avira Antivirus For Endpoint	Before 8.3.54.138
Avira Avira Antivirus For Small Business	Before 8.3.54.138
Avira Avira Exchange Security	Before 8.3.54.138
Avira Avira Free Security Suite	Before 8.3.54.138
Avira Avira Internet Security Suite	Before 8.3.54.138
Avira Avira Prime	Before 8.3.54.138